CVE

Id
62419  
CVE No.
CVE-2013-2472  
Status
Candidate  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect ShortBandedRaster size checks" in 2D.  
Phase
Assigned (20130305)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
624987 62419 CVE-2013-2472 MISC:http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/3cd4bec64e31  View
624988 62419 CVE-2013-2472 CONFIRM:http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html  View
624989 62419 CVE-2013-2472 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=975107  View
624990 62419 CVE-2013-2472 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21642336  View
624991 62419 CVE-2013-2472 CONFIRM:http://advisories.mageia.org/MGASA-2013-0185.html  View
624992 62419 CVE-2013-2472 GENTOO:GLSA-201406-32  View
624993 62419 CVE-2013-2472 URL:http://security.gentoo.org/glsa/glsa-201406-32.xml  View
624994 62419 CVE-2013-2472 HP:HPSBUX02922  View
624995 62419 CVE-2013-2472 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
624996 62419 CVE-2013-2472 HP:SSRT101305  View
624997 62419 CVE-2013-2472 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880  View
624998 62419 CVE-2013-2472 HP:HPSBUX02907  View
624999 62419 CVE-2013-2472 URL:http://marc.info/?l=bugtraq&m=137545505800971&w=2  View
625000 62419 CVE-2013-2472 HP:HPSBUX02908  View
625001 62419 CVE-2013-2472 URL:http://marc.info/?l=bugtraq&m=137545592101387&w=2  View
625002 62419 CVE-2013-2472 MANDRIVA:MDVSA-2013:183  View
625003 62419 CVE-2013-2472 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:183  View
625004 62419 CVE-2013-2472 REDHAT:RHSA-2013:0963  View
625005 62419 CVE-2013-2472 URL:http://rhn.redhat.com/errata/RHSA-2013-0963.html  View
625006 62419 CVE-2013-2472 REDHAT:RHSA-2013:1081  View
625007 62419 CVE-2013-2472 URL:http://rhn.redhat.com/errata/RHSA-2013-1081.html  View
625008 62419 CVE-2013-2472 REDHAT:RHSA-2013:1060  View
625009 62419 CVE-2013-2472 URL:http://rhn.redhat.com/errata/RHSA-2013-1060.html  View
625010 62419 CVE-2013-2472 REDHAT:RHSA-2013:1455  View
625011 62419 CVE-2013-2472 URL:http://rhn.redhat.com/errata/RHSA-2013-1455.html  View
625012 62419 CVE-2013-2472 REDHAT:RHSA-2013:1456  View
625013 62419 CVE-2013-2472 URL:http://rhn.redhat.com/errata/RHSA-2013-1456.html  View
625014 62419 CVE-2013-2472 REDHAT:RHSA-2013:1059  View
625015 62419 CVE-2013-2472 URL:http://rhn.redhat.com/errata/RHSA-2013-1059.html  View
625016 62419 CVE-2013-2472 SUSE:SUSE-SU-2013:1305  View
625017 62419 CVE-2013-2472 URL:http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html  View
625018 62419 CVE-2013-2472 SUSE:SUSE-SU-2013:1293  View
625019 62419 CVE-2013-2472 URL:http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html  View
625020 62419 CVE-2013-2472 SUSE:SUSE-SU-2013:1255  View
625021 62419 CVE-2013-2472 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html  View
625022 62419 CVE-2013-2472 SUSE:SUSE-SU-2013:1256  View
625023 62419 CVE-2013-2472 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html  View
625024 62419 CVE-2013-2472 SUSE:SUSE-SU-2013:1257  View
625025 62419 CVE-2013-2472 URL:http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html  View
625026 62419 CVE-2013-2472 CERT:TA13-169A  View
625027 62419 CVE-2013-2472 URL:http://www.us-cert.gov/ncas/alerts/TA13-169A  View
625028 62419 CVE-2013-2472 BID:60656  View
625029 62419 CVE-2013-2472 URL:http://www.securityfocus.com/bid/60656  View
625030 62419 CVE-2013-2472 OVAL:oval:org.mitre.oval:def:16712  View
625031 62419 CVE-2013-2472 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:16712  View
625032 62419 CVE-2013-2472 OVAL:oval:org.mitre.oval:def:18742  View
625033 62419 CVE-2013-2472 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:18742  View
625034 62419 CVE-2013-2472 OVAL:oval:org.mitre.oval:def:18846  View
625035 62419 CVE-2013-2472 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:18846  View
625036 62419 CVE-2013-2472 OVAL:oval:org.mitre.oval:def:19543  View
625037 62419 CVE-2013-2472 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:19543  View
625038 62419 CVE-2013-2472 SECUNIA:54154  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20189 JVNDB-2013-001764 Wireshark の CSN.1 解析機能におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 Wireshark の CSN.1 解析機能は、関数ポインタを適切に管理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2013-2477 62419 3.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001764.html  View